The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.
Volume of CVEs assigned to CWE-372 and their average CVSS base score over time.
Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-31127HIGH libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. I | May 8, 2023 | 8.8 | 27 | NO | NO |
CVE-2026-41388MEDIUM OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers can restart the applica | Apr 28, 2026 | 6.5 | 25 | NO | NO |
CVE-2021-25735MEDIUM A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they r | Sep 6, 2021 | 6.5 | 25 | NO | NO |
CVE-2024-22590CRITICAL The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, includi | May 28, 2024 | 9.1 | 24 | NO | NO |
CVE-2026-41340MEDIUM OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts | Apr 23, 2026 | 6.5 | 22 | NO | NO |
CVE-2026-41300MEDIUM OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows. Attackers can route gateway credentials to | Apr 21, 2026 | 6.5 | 22 | NO | NO |
CVE-2020-27222HIGH In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal stat | Feb 3, 2021 | 7.5 | 22 | NO | NO |
CVE-2023-4012HIGH ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3). | Aug 7, 2023 | 7.5 | 20 | NO | NO |
CVE-2023-36834MEDIUM An Incomplete Internal State Distinction vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series allows an adjacent attacke | Jul 14, 2023 | 6.5 | 17 | NO | NO |
Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.
Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.
Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.